SECTION I— CLAIMS 



Amendment to the Claims: 

This listing of the claims will replace all prior versions and listings of claims in the 
application. Claims 1,17-18, and 21 are amended herein. Claim 20 is herein canceled without 
prejudice. No new claims were added. Claims 1-19 and 21-23 remain pending in the application. 

Listing of Claims: 

1. (Currently amended) A method comprising: 

intercepting a request from a user for a web page, the user connected to a blocked port of 
a packet forwarding device , the blocked port preventing that pr e v e nts the user from accessing a 
network coupled to the forwarding device; 

directing the user to a network login page; 

authenticating the user; and 

allowing the user to access the network when the user is authenticated. 

2. (Original) The method of claim 1, wherein intercepting a request from a user comprises 
intercepting a HyperText Transfer Protocol (HTTP) request from the user. 

3. (Original) The method of claim 2, further comprising receiving a Domain Name Service 
(DNS) request to translate a domain name specified in the HTTP request into an Internet 
Protocol (IP) address. 

4. (Original) The method of claim 3, further comprising proxying the DNS request to a DNS 
server. 
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5. (Original) The method of claim 4, further comprising receiving a response from the DNS 
server with a DNS-resolved IP address. 

6. (Original) The method of claim 5, further comprising sending the DNS-resolved IP address to 
the user. 

7. (Original) The method of claim 6, further comprising intercepting a request from the user 
directed to the DNS-resolved IP address. 

8. (Original) The method of claim 7, wherein directing the user to a network login page 
comprises responding to the user with a redirect to a Uniform Resource Locator (URL) address 
for the network login page. 

9. (Original) The method of claim 8, further comprising receiving a DNS request from the user to 
translate a domain name for the network login page into an IP address. 

10. (Original) The method of claim 9, further comprising responding to the user with the IP 
address of the packet forwarding device. 

1 1 . (Original) The method of claim 10, further comprising receiving from the user a request to 
the IP address of the packet forwarding device. 

12. (Original) The method of claim 11, further comprising responding to the user with the 
network login page. 

13. (Original) The method of claim 12, further comprising receiving an authentication request 
from the user with user identification data. 

14. (Original) The method of claim 13, wherein authenticating the user comprises parsing the 
authentication request and forwarding the authentication request to an authentication server. 

15. (Original) The method of claim 14, wherein parsing the authentication request and 
forwarding the authentication request to an authentication server comprises creating a packet 
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with the user identification data in accordance with the RADIUS communications protocol and 
forwarding the RADIUS packet to a RADIUS server. 

16. (Original) The method of claim 15, further comprising receiving a response from the 
RADIUS server to indicate whether the user identification data is authentic. 

17. (Currently amended) The method of claim 1, wherein allowing the user to access the network 
when the user is authenticated comprises unblocking the blocked port of the packet forwarding 
device to allow the user to access the network when the user is authenticated. 

18. (Currently amended) An apparatus comprising: 

a packet forwarding device coupled to a network, the packet forwarding device having a 
blocked port , the blocked port to prevent that pr e v e nts a user connected to the blocked port from 
accessing the network until the user is authenticated; and 

an authenticator discovery controller coupled to the packet forwarding device to intercept 
a request from the user for a web page and direct the user to a network login page for 
authentication. 

19. (Original) The apparatus of claim 18, further comprising a network login controller coupled 
to the packet forwarding device to authenticate the user and allow the user to access the network 
when the user is authenticated. 

20. (Canceled). 

21 . (Currently amended) The apparatus of claim [[20]] 19, wherein the network login controller 
to unblock the blocked port of the packet forwarding device when the user is authenticated. 

22. (Original) The apparatus of claim 21, wherein the authenticator discovery controller to 
further receive a Domain Name Service (DNS) request from the user and to proxy the DNS 
request to a DNS server to translate a domain name into an Internet Protocol (IP) address. 
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23. (Original) The apparatus of claim 18, wherein the packet forwarding device is a switch. 
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